static route issue

[lostdragon]

Dear community,

after upgrading our PA220 to PAN-OS 9.0 our static routes are not working anymore and during a commit we recieve the error massage

• Static route default_route_to_WAN next hop IP 192.168.100.254 is not in subnet of outgoing interface ethernet1/1
• (Module: routed)
  
  

Here is the configuration of our default route to the internet:

What am i missing? Any help in this regard is highly appreciated.

Thank you in advance.

[Mick_Ball · Accepted solution]

the only thing you are missing is the oddities  of these Gweneth Paltro's.

This is a new check introduced in 9.0 part of the new feature where FQDN can be used as "Next Hop."

I think it tries to resolve the IP to an IP... if you get what i mean....

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLlGCAW

NOTE: This is only a warning and does not cause the commit to fail.

[NateNewman]

It does cause the commit to fail. It's failing on me right now because of this.

[Mick_Ball]

Can you post the full error message